diff --git a/manage/sites/configure-site.mdx b/manage/sites/configure-site.mdx
index e7be9ca..db9c74a 100644
--- a/manage/sites/configure-site.mdx
+++ b/manage/sites/configure-site.mdx
@@ -86,13 +86,19 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
Interval for pinging the server.
- **Default**: `3s`
+ **Default**: `15s`
Timeout for each ping.
- **Default**: `5s`
+ **Default**: `7s`
+
+
+
+ Idle timeout for UDP proxied client flows before cleanup.
+
+ **Default**: `90s`
@@ -137,6 +143,12 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
**Default**: `false` (clients enabled)
+
+ Disable SSH auth daemon and native SSH mode (remote auth daemon integrations still work).
+
+ **Default**: `false`
+
+
Name of the WireGuard interface.
@@ -146,7 +158,7 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
Enable Prometheus /metrics exporter.
- **Default**: `true`
+ **Default**: `false`
@@ -167,6 +179,12 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
**Default**: `false`
+
+ Enable pprof debug endpoints on the admin server.
+
+ **Default**: `false`
+
+
Optional region resource attribute for telemetry and metrics.
@@ -203,6 +221,32 @@ import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
**Example**: `/path/to/client.p12`
+
+ Pre-shared key for auth daemon authentication.
+
+
+
+ Path to the principals file for auth daemon.
+
+ **Default**: `/var/run/auth-daemon/principals`
+
+
+
+ Path to the CA certificate file for auth daemon.
+
+ **Default**: `/etc/ssh/ca.pem`
+
+
+
+ Generate a random password for authenticated users.
+
+ **Default**: `false`
+
+
+
+ Print the Newt version and exit.
+
+
Prefer this endpoint for the connection (if set, will override the endpoint from the server).
@@ -229,16 +273,28 @@ When both environment variables and CLI arguments are provided, CLI arguments ta
Newt secret for authentication (equivalent to `--secret`)
-
- Enable Newt's built-in auth daemon mode (equivalent to `--auth-daemon`).
-
- **Default**: `false`
-
-
Pre-shared key used to authenticate external auth daemons to Newt (equivalent to `--ad-pre-shared-key`)
+
+ Path to the principals file for auth daemon (equivalent to `--ad-principals-file`).
+
+ **Default**: `/var/run/auth-daemon/principals`
+
+
+
+ Path to the CA certificate file for auth daemon (equivalent to `--ad-ca-cert-path`).
+
+ **Default**: `/etc/ssh/ca.pem`
+
+
+
+ Generate a random password for authenticated users (equivalent to `--ad-generate-random-password`).
+
+ **Default**: `false`
+
+
Site name when provisioning with a provisioning key (equivalent to `--name`). Supports `{{env.VARIABLE_NAME}}` templating from the environment.
@@ -296,13 +352,19 @@ When both environment variables and CLI arguments are provided, CLI arguments ta
Interval for pinging the server (equivalent to `--ping-interval`)
- **Default**: `3s`
+ **Default**: `15s`
Timeout for each ping (equivalent to `--ping-timeout`)
- **Default**: `5s`
+ **Default**: `7s`
+
+
+
+ Idle timeout for UDP proxied client flows before cleanup (equivalent to `--udp-proxy-idle-timeout`).
+
+ **Default**: `90s`
@@ -325,6 +387,12 @@ When both environment variables and CLI arguments are provided, CLI arguments ta
**Default**: `false`
+
+ Disable SSH auth daemon and native SSH mode (equivalent to `--disable-ssh`).
+
+ **Default**: `false`
+
+
Name of the WireGuard interface (equivalent to `--interface`)
@@ -334,7 +402,7 @@ When both environment variables and CLI arguments are provided, CLI arguments ta
Enable Prometheus /metrics exporter (equivalent to `--metrics`).
- **Default**: `true`
+ **Default**: `false`
@@ -355,6 +423,12 @@ When both environment variables and CLI arguments are provided, CLI arguments ta
**Default**: `false`
+
+ Enable pprof debug endpoints on the admin server (equivalent to `--pprof`).
+
+ **Default**: `false`
+
+
Optional region resource attribute for telemetry and metrics (equivalent to `--region`).